Senior Information Security Analyst
A senior information security role at Hong Kong Housing Society: leading security project delivery with vendors, managing security systems (SIEM/SOAR, EDR/NDR, WAF, DLP, cloud), performing risk assessments and incident handling, and improving defenses with AI/automation. Based in the Eastern district of Hong Kong; requires ~8 years IT and 5 years infosec experience plus certifications like CISSP/C
- Compensation
- Not disclosed
- Location
- Eastern
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- Degree holder in Computer Science or related discipline
- 8 years' work experience in IT, including at least 5 years in information security in a sizable organisation
- Solid foundation in enterprise security domains such as firewalls, WAF, DLP, cloud and application security, EDR/NDR, SIEM/SOAR, and DevSecOps
- Experience implementing IT/security frameworks (e.g. ITIL, ISO/IEC 20000, ISO/IEC 27001, NIST CSF, or Digital Policy Office Practice Guide)
- At least one professional information security certification (CISSP, CISM, CEH, CRISC, or CCSP)
- Capable of defining functional and/or technical specifications for external IT consultants, vendors, or service providers
- Proven track record in managing large-scale security projects delivered on time and within budget
- Self-motivated with a can-do attitude and innovative mindset
- Well organised, able to prioritise and complete tasks efficiently
- Strong interpersonal, time management, and communication skills with proficiency in both English and Chinese
Nice to have
- Relevant qualification in information security
- Data analytics and/or programming skills such as Python and PowerShell for process automation
Full description
The Job:
- Lead information security project implementation and drive external IT vendors, system integrators, or consultants to complete projects on schedule and within budget.
- Manage information security systems and services to ensure compliance with the organisation’s IT security policies, standards, ISO/IEC 20000/27001, and regulatory requirements.
- Perform risk assessment on IT systems or projects to identify potential security weaknesses and non-compliance issues.
- Analyze emerging cyber threats across infrastructure, applications, cloud, AI, and supply chains, and recommend appropriate security solutions and controls to mitigate the identified risks.
- Responsible for handling information security incidents and developing preventive measures.
- Leverage AI and automation technologies to enhance security investigation capabilities and improve operational efficiency.
- Assist management to develop or update IT security standards and procedures.
- Collaborate closely with IT teams and business users to ensure successful enablement of cybersecurity solutions.
- Coach and provide technical guidance to less experienced peers.
- Perform other ad-hoc tasks when required.
The Person:
- Degree holder in Computer Science or related discipline with relevant qualification in information security would be preferred.
- 8 years’ work experience in IT, and at least 5 years in information security in a sizable organisation.
- Solid foundation in enterprise information security domains, such as firewalls, WAF, DLP, cloud and application security, EDR/NDR, SIEM/SOAR, and DevSecOps, etc..
- Experience in implementing IT/security framework (e.g. ITIL, ISO/IEC 20000, 27001, NIST CSF, or Digital Policy Office Practice Guide).
- Hold at least one professional information security certification, such as CISSP, CISM, CEH, CRISC, or CCSP.
-
Data analytics and/or programming skills, such as Python and PowerShell, for process automation will be an advantage.
-
Capable of defining functional and/or technical specifications for external IT consultants, vendors, or service providers to deliver solutions.
-
A self-motivator who has a “can-do” attitude and innovative mindset.
-
Proven track record in managing large-scale security projects with the ability to deliver on time and within budget.
-
Well organised and able to prioritise and complete tasks efficiently.